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START ^ 



CREATE REDBOOK AUDIO SESSION ON CD 
CONTAINING AUTHORED AUDIO CONTENT 
FOR USE IN AUDIO CD PLAYERS 



205 



PROTECT REDBOOK SESSION 
CONTENT FROM BEING READ 
BY CD-ROM DRIVES 



210 



CREATE YELLOWBOOK DATA SESSION 
ON CD TO HOLD PROTECTED AUDIO 
DATA AND ADDITIONAL DATA 



215 



BREAK AUTHORED CONTENT / 220 
INTO TRACKS 



COMPRESS AND ENCRYPT EACH TRACK; 
WRITE TRACKS AND DIGITAL RIGHTS 
MANAGEMENT SOFTWARE TO CD 



225 



ENCRYPT USAGE RULES FOR 
AUDIO DATA; WRITE RULES AND 
DECRYPTION KEYS TO CD 



230 



WRITE ANY ADDITIONAL DATA 
OR CONTENT TO CD 



235 



▼ 

Q END ^ 
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START ^ 



225 



COMPRESS TRACK USING DESIRED COMPRESSION 

TECHNIQUE 



305 



BREAK TRACK INTO PACKETS 



310 



GENERATE TWO DIFFERENT SYMMETRIC 
AUDIO ENCRYPTION KEYS 



I 



315 



ENCRYPT EVERY EVEN-NUMBERED PACKET USING ONE 
SYMMETRIC ENCRYPTION KEY; ENCRYPT EVERY ODD- 
NUMBERED PACKET USING OTHER SYMMETRIC 
ENCRYPTION KEY; WRITE PACKETS TO DISC 



320 



INPUT "GENERIC" PUBLIC/PRIVATE ENCRYPTION KEY PAIR 
THAT CAN BE REUSED OVER MULTIPLE ALBUMS 



INPUT PUBLIC/PRIVATE ENCRYPTION KEY PAIR THAT IS 
UNIQUE TO ALBUM BEING ENCRYPTED 



325 



330 



ENCRYPT ONE SYMMETRIC KEY WITH PUBLIC KEY FROM GENERIC 
PAIR; ENCRYPT OTHER SYMMETRIC KEY WITH PUBLIC KEY FROM 
UNIQUE PAIR; WRITE ENCRYPTED KEYS TO DISC 



I 



335 



CHOOSE TAMPER-RESISTANT DRM MODULES 
CORRESPONDING TO THE INPUTTED GENERIC AND 
UNIQUE KEYS USED 



340 



WRITE MODULES TO DISC 



345 



GENERATE VALIDATION CODE FOR DRM 



350 



I 

END ^ 
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START ^ 



ORDER BYTES OF 
CODE IN CANONICAL 
ORDER 



410 



350 



HASH CANONICALLY- 
ORDERED BYTES INTO 
CHECKSUM 



INPUT PUBLIC/PRIVATE 
ENCRYPTION KEY PAIR 



420 



430 



"SIGN" CHECKSUM BY 
ENCRYPTING WITH PRIVATE KEY 
TO CREATE VALIDATION CODE 



440 



WRITE SIGNED CHECKSUM 
AND PUBLIC KEY TO DISC 



450 



^ END 
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230 



^ START ^ 





f 


ENCRYPT USAGE RULES WITH GENERIC 
PUBLIC KEY; STORE ON DISC 




f 


GENERATE CD IDENTIFIER; STORE ON DISC 
SO THAT COPIES OF CD WILL NOT RETAIN 
THIS ID 




f 


CREATE SYMMETRIC LICENSE ENCRYPTION 
KEY USING CD ID AS SEED 






CREATE MASTER LICENSE FOR CD 






CREATE TRACK-SPECIFIC LICENSES 




f 


ENCRYPT LICENSES USING LICENSE 
ENCRYPTION KEY 




f 


STORE ENCRYPTED LICENSES ON DISC 




f 



/ 



505 



/ 



510 



515 



520 



525 



530 



535 



END ^ 
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^ START ^ 



CD IS INSERTED IN TO DRIVE ^ 



605 



OPERATING SYSTEM ATTEMPTS 
TO AUTO-RUN APPLICATION 
FROM CD 



610 



OFFER USER CHOICE OF 
ACCESS OPTIONS 



620 



USER SELECTS 
COPY TO HARD 
DRIVE 



615 



YES 



625 



USER SELECTS 
PLAYBACK 



630 



USER SELECTS 
TRANSFER TRACK 
TO DEVICE OR 
BURN TO CD 
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START 



705 



YES- 



DOES HARD DRIVE 
HAVE DESIRED PLAYBACK 
APPLICATION? 



ARE NECESSARY 
DRM COMPONENTS INSTALLED' 
VLONG WITH EXISTING PLAYBACP 
APPLICATION? 



715 



720 



YES 



710 



INSTALL PLAYBACK 
APPLICATION AND DRM 
SOFTWARE FROM CD 



INSTALL DRM COMPONENTS 
INTO PLAYBACK APPLICATION 



T 



620 



COPY TRACKS. ENCRYPTION KEYS TO HARD 
DRIVE 



I 



725 



GENERATE LICENSE DECRYPTION KEY FROM / 730 
CD ID; DECRYPT LICENSE(S) 



GENERATE BINDING ID FOR HARD DRIVE; 
WRITE TO DRIVE 



735 



GENERATE SYMMETRIC ENCRYPTION KEY 
USING HARD DRIVE ID AS SEED 



740 



ENCRYPT LICENSE(S) USING ENCRYPTION 
KEY 



COPY ENCRYPTED LICENSE(S) TO HARD 
DRIVE 



745 



750 



END J 
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START ^ 



LOAD DRM SOFTWARE 



625 



805 



AUTHENTICATE DRM SOFTWARE AND 
PLAYBACK APPLICATION 



810 



815 



NO 




REQUEST PLAYBACK FROM DRM 
SOFTWARE 



820 



825 



NO 




DECRYPT CONTENT PACKETS AND PASS 
TO AUDIO DEVICE 



830 



► 
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Q START ^ 



LOAD DIGITAL RIGHTS MANAGEMENT 
SOFTWARE AND DEVICE INTERFACES 



905 



GET BINDING ID FROM CD OR HARD DRIVE 



910 



CREATE DECRYPTION KEY USING BINDING ID AS 
A SEED; DECRYPT LICENSE(S) USING KEY 



915 



630 



920 

DOES LICENSE 
GIVE USER RIGHTS TO TRANSFER 
TRACK? 

YESi 



AUTHENTICATE DRM, DEVICE INTERFACE 
SOFTWARE AND TRANSFER SOFTWARE 



925 



NO 




YES 



TRANSLATE TRACKS TO FORMAT AND ADD 
DRM INFORMATION IF NECESSARY 



TRANSFER TRACKS TO DEVICE 



945 



» ( END ) F'/G. 9 
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810 
925 



1035 



\ 



^ START ^ 



ORDER BYTES OF CODE IN CANONICAL 
ORDER 



1010 



HASH CANONICALLY-ORDERED BYTES INTO 
CHECKSUM 



1020 



DECRYPT STORED VALIDATION CODE WITH 
STORED PUBLIC KEY 



1025 



NO 




YES 



REPORT THAT MODULE 
IS NOT TRUSTED 



REPORT THAT MODULE 
IS TRUSTED 



1040 



▼ 

^ END ^ 



FIG. lO 



SYSTEM AND METHOD FOR DISTRIBUTtNG PROTECTED AUDIO CONTENT. . . 

Hug, et al. 

Appl.No.:N/A Atty Docket: REALNET.202A 
11/12 



START ^ 



820 





r 


GET BINDING ID FROM CD OR HARD DRIVE 



1105 



CREATE DECRYPTION KEY USING BINDING ID AS 
A SEED; DECRYPT LICENSE(S) USING KEY 



1110 




YES 



1120 



USER MAY 
NOT PLAY 
TRACKS 



1125 



USER MAY 
PLAY 
TRACKS 



^ END J 



FIG. 11 



SYSTEM AND METHOD FOR DISTRIBUTING PROTECTED AUDIO CONTENT . 

Hug, et al. 

Appl. No.: N/A Atty Docket: REALNET.202A 



12/12 



START ^ 



730 



DECRYPT AUDI 
KEYS FOR BO 
ODD AUDIC 


r 

O DECRYPTION 
TH EVEN AND 
> PACKETS 




r 


GENERATE SYMMETRIC 
ENCRYPTION PROTECTION KEY 






ENCRYPT AUDIO DECRYPTION 
KEYS WITH PROTECTION KEY 



1205 



1220 X, £ 



1210 



1215 



RETRIEVE FIRST ENCRYPTED 
PACKET 



1250 



RETRIEVE NEXT ENCRYPTED 
PACKET 



DECRYPT AUDIO DECRYPTION 
KEY FOR RETRIEVED PACKET 



DECRYPT PACKET USING KEY 
FOR THAT PACKET 



I 



1225 



1230 



YES 



PASS DECRYPTED PACKET TO 
TRUSTED PLAYBACK DEVICE 


^ 1235 




r 




DELETE PACKET. PACKET 
DECRYPTION KEY 


y 1240 




r 






NO 



^ END ^ 



